CVE-2018-12354

Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request

published June 13, 2018

CVSS
—
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Published
2018-06-13T23:00Z
EPSS history
Timeline
  • 13 JUN 23:00Z
    Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request
    cvelistv5